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Claims 



1 . Method for processing IP traffic based on information within TCP headers canied 
in IP datagrams, in which traffic at least ^me of the IP datagrams are encrypted, 
characterized in that 

if an IP datagram to be encrypted contains TCP header information used as a basis 
for the processing, at least an indication of the information on which the processing 
is based is placed into the header of sa/d datagram. 



10 2. A method according to claim 1, characterized in that 

if an IP datagram to be encrypted contains a TCP acknowledgment, an indication of 
the acknowledgment is placed into pe header of said datagram. 

3. A method according to claim 1 , /characterized in that 

15 said placing of at least an indication into the header of said datagram comprises 

placing a copy of at least the infcj|rmation on which the processing is based into the 
header of said datagram. 

4. A method according to clainifS, characterized in that 
20 said placing of at least an indidation into the header of said datagram comprises 

placing of all information of a/TCP header into the header of said datagram. 
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5. A method according to claim 3, characterized in that 
a copy of a TCP acknowledgment number is placed into the header of said 
datagram. 



30 



6. A method according to tflaim 3, characterized in that 

a copy of the contents of yie window size field of a TCP header is placed into the 
header of said datagram. 

7. A method according jfo claim 1, characterized in that 

if said datagram is an IPv4 datagram, said at least an indication is placed in an 
options field of said datagram. 
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8. A method according to claim 1 , characterized in that - 

if said datagram is ari IPv6 datagram, said at least an indication is placed in an 

extension header irr said datagram. 
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9. A method according to claim 3, in which m^hod 

- a source network element generates IP datagrams, 

- an intermediate network element forwaras the IP datagrams to a destination 
network element, and / 

- the destination network element receives the IP datagrams, 
characterized in that / 

the intermediate network element/modifies said copy of the information on which 
the processing is based. / 

10. A method according to d^im 9, characterized in that 

said destination network element uses said modified copy of the information instead 
of the encrypted version /f the information carried as the pay load of the IP 
datagram. / 

1 1. A method accoraing to claim 1, being used in congestion control in a TCP/IP 
network, characterized in that 

the method con4)rises the step of delaying the transmission of an encrypted IP 
datagram by 2t network element, if said encrypted IP datagram comprises an 
indication of a TCP acknowledgment and if said network element detects 
congestion in the network. 



